Remote Code Execution Vulnerability in Oracle Database Server

CVE-2020-2737

Summary

This vulnerability in the Core RDBMS component of Oracle Database Server allows an attacker with high privileges and network access to compromise the system. Exploitation is challenging as it requires human interaction from an individual other than the attacker. The affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c, and a successful exploit can lead to the potential takeover of the Core RDBMS, posing significant risks to confidentiality, integrity, and availability.

References